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Preparing the ground state of a system of interacting classical particles is an NP-hard problem. 
Thus, there is in general no better algorithm to solve this problem than exhaustively going through 
all A'^ configurations of the system to determine the one with lowest energy, requiring a running time 
proportional to A''. A quantum computer, if it could be built, could solve this problem in time \/7^. 
Here, we present a powerful extension of this result to the case of interacting quantum particles, 
demonstrating that a quantum computer can prepare the ground state of a quantum system as 
efficiently as it does for classical systems. 



PACS numbers: 03.67.Ac,03.67.-a 

The simulation of quantum many-body systems is a no- 
toriously hard problem in condensed matter physics, but 
it could easily be handled by a quantum computer []|. 
There is however one catch: while a quantum computer 
can naturally implement the dynamics of a quantum sys- 
tem — i.e. solve Schrodinger's equation — there was un- 
til now no general method to initialize the computer in a 
physically relevant state of the simulated system. 

For most physical applications, we are interested in 
the low-energy eigenstates of the Hamiltonian H because 
they describe the most interesting phases of matter, e.g. 
ferromagnetism, superconductivity, quantum Hall effect, 
and Bose-Einstein condensation to name a few. Unfor- 
tunately, preparing low-energy states is already a very 
difficult task even when H describes a classical system. 

Indeed, this problem is an archetype of the complexity 
class NP. This class contains all decision problems, i.e. 
problems of the form "Does x satisfy the property £?" , 
such that when the answer is "yes" , there exists a wit- 
ness w that can be used to prove this answer efficiently. 
More precisely, for each x there exists a polynomial-size 
verification circuits Vx such that 1) when x € C there 
exists a witness w that will cause Vx to output 1, and 2) 
when a; ^ £, all witnesses cause Vx to output 0. 

Consider for instance a local Ising model H{{a}) — 

^i<j Jij'^i'^j +J2i ^i'^i on n spins Oi £ {0, 1}. "Is there a 
spin configuration a of energy less than ET^ is a problem 
in NP. Indeed, when the answer is yes, the configuration 
a that achieves this low energy can serve as a witness. 
Verifying the answer boils down to computing the energy, 
which requires at most operations. Finally, when the 
answer is "no" , there is no configuration that can cause 
the verification procedure to accept. Clearly, an algo- 
rithm that solves this problem can be used to determine 
the ground state energy with little overhead. 

The Ising problem is in fact NP-complete, meaning 
that it is the hardest problem in the class . Even more 
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surprising is the fact that approximating the energy of 
the system with an error that increases with the system 
size n is just as hard as the exact case — it is also NP- 
complete. This is a consequence of a famous theorem on 
probabilistically checkable proofs (PCP) [1,0]. Although 
some special cases can be solved efficiently ja S Q , there 
is in general no better algorithm to solve the Ising prob- 
lem than systematically going through all iV = 2" spin 
configurations to determine the one with lowest energy. 

Additionally to the immediate physical context, find- 
ing ground states provides a very natural setting for 
studying combinatorial optimization problems — prob- 
lems that consist in minimizing an objective function 
H (playing the role of energy) over some configuration 
space. Optimization problems play a vital role in almost 
every branch of science, from computer science to statis- 
tical physics and computational biology [1] . Determining 
a solution by exhaustive search is, in general, computa- 
tionally prohibitive because the size N of the search space 
grows exponentially with the input size. Given the prac- 
tial importance of optimization problems, more efficient 
methods are highly desirable. 

A common strategy to solve optimization problems is 
simulated annealing Like its name suggests, this 

method imitates the process undergone by a metal that 
is heated to a high temperature and then slowly cooled 
to its configuration of lowest energy. If the cooling pro- 
cess is too fast, the system can become trapped in a local 
minimum, resulting in a failure of the algorithm. When 
the cooling is sufficiently slow however, thermal fiuctu- 
ations should prevent this phenomenon from occurring. 
Thus, simulated annealing requires a detailed knowledge 
of the energy landscape and therefore cannot be applied 
to all minimization problems. It was shown recently that 
a simulated annealing algorithm operated on a quantum 
computer achieves a quadratic speed-up over classical an- 
nealing [10; ]. Whether the method can minimize the en- 
ergy of a quantum system as efficiently is unknown. 

Adiabatic quantum computation is another method to 
tackle this class of problems with a quantum computer. 
The adiabatic theorem asserts that a system prepared 
in the instantaneous ground state of a Hamiltonian that 
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varies slowly in time will remain in the ground state. 
The ground state of H can thus be prepared by choos- 
ing a time-dependent Hamiltonian with a simple initial 
ground state and slowly changing it to H . This algo- 
rithm was applied to randomly generated instances of an 
NP-complete problem |ljj|. The algorithm worked well 
for the small examples that could be simulated on a clas- 
sical computer. It was later shown [12j however that the 
particular interpolation scheme suggested [ll| fails for 
satisfiability problems, and the best known upper bound 
is a running time of N (T^ (poly-logarithmic corrections 
are ignored throughout). In principle, this technique can 
also be applied to minimize the energy of a quantum 
Hamiltonian, but little is known about its performances 
in that case. 

Finally, Grover's algorithm can find the ground 
state of a classical system in ^fN steps. Given a pro- 
jector R and a state ?/; with Iji?!-!/))!!^ = g > 0, Grover's 
algorithm consists of a sequence of two reflections, I—2R 
and /— 2\ip)(xp\. Repeating this sequence times has 

the effect of projecting -0 onto the image of R, with small 
corrections that can safely be ignored for the present dis- 
cussion. Note that the value of q must be approximately 
known, and this can be achieved by quantum counting 
[13]. Choosing R to be the projector on H < E and tp 
a uniform superposition of all spin configurations yields, 
after at most a/TV iterations, a state of energy less than 
E. The ground state is obtained by "sweeping" the value 
of E. Although this remains an exponential scaling, it is 
significantly faster than a brute force search, and there 
are indications that this scaling is optimal |15| . 

At first sight, it seems like this last technique could be 
used to find the ground state of a quantum many-body 
system just as well. All that is needed is a method to 
implement a projector R onto the low-energy states of 
the system, i.e. H < E for some given E. Combining 
this method with Grover's algorithm on an initial random 
state would create the desired outcome with high proba- 
bility. In fact, it is not necessary to initialize the system 
in a truly random state, but instead it can be randomly 
selected among all stabilizer states. These have all the 
essential properties of random states and, most impor- 
tantly, can be prepared with at most operations 
Unfortunately, there is no known procedure to implement 
the projector on H < E. The phase estimation algorithm 
fTrt comes close however: it can be used to estimate the 
energy of any local Hamiltonian with a polynomial small 
error and failure probability. 

To describe this algorithm, it is convenient to assume 
that H has been normalized such that ||i?|| < 1 and 
to consider its spectral decomposition, H\a) = ipa\ci). 
The phase estimation algorithm uses k auxiliary qubits 
initially in the state and, given an eigenstate \a) of H, 
produces the output \a) (g) \(pa) where 

V2^ , 

These are "momentum" states, so the value of (pa can be 



estimated via Fourier transform. Hence, we can imple- 
ment an approximation R of the projector on H < E hy 
running the phase estimation algorithm and projecting 
the auxiliary qubits onto the subspace of low momen- 
tum. Combining this method with Grover's algorithm 
should thus yield a good approximation of the ground 
state. 

However, a detailed analysis (see Appendix IB)) of this 
"naive" approach reveals a failure. The problem is that 
the projector R constructed from phase estimation is only 
an approximation oi H < E and errors can build up dur- 
ing the amplification procedure. There are two sources 
of errors. Firstly, the quantum computer cannot exactly 
reproduce the dynamics of the many-body system. This 
is not a problem however since a l/poly(n) accuracy can 
be achieved using a Trotter-Suzuki decomposition at a 
polynomial cost and this error does not build up. We 
will henceforth safely ignore this source of error. 

Secondly, even when the energy Lpa associated with \a) 
is well above the acceptance threshold E, there is a small 
probability that phase estimation will diagnose it as be- 
ing smaller than E. It is these imperfections that cause 
the algorithm to fail because they build up during am- 
plification. The typical outcome of this naive algorithm 
is an entangled state of the system and auxiliary qubits 
rather than a low-energy state of the system qubits ten- 
sored with the all-zero state of the auxiliary qubits. De- 
tailed knowledge of the energy landscape — such as the 
presence of an energy gap — could be used to circumvent 
this effect, but in general the method will fail. 

We will now present our algorithm that works for all 
local Hamiltonians. We proceed by making two modi- 
fications to the naive algorithm. A detailed analysis is 
presented in the appendices. The first modification is 
to run the algorithm backward: we initialize the system 
qubits in a random state |'0) = X^o'^al^')' auxiliary 
qubits in a low momentum state (c.f. Eq. [1]), and ex- 
ecute the inverse of the phase estimation algorithm. This 
produces the state 

1$) =^aa(¥'a|M>|a>® |Ofc) + ... (2) 

a 

where the ellipsis represents terms where the auxiliary 
qubits are in a state orthogonal to |Ofc). The factor 
|((pa|M)| is a function oi ^~ ipa peaked at with a width 
2^^ . Thus, we can use Grover's algorithm to amplify the 
all- zero state of the auxiliary qubits and obtain a state 
that is mostly a superposition of those eigenstates of H 
with eigenvalues close to /x, i.e. the amplitude of each 
term in the superposition gets re- weighted by |((/3a|/j,)|. 
This procedure truly acts as a filter, suppressing the am- 
plitude of eigenstates outside its bandwidth for benefit 
of the eigenstates inside the bandwidth. Moreover, the 
auxiliary qubits are systematically returned to as de- 
sired. 

Unfortunately, this is still not sufficient for our purpose 
because the filter has a heavy tail. There is an exponen- 
tial number of states with energy outside the bandwidth. 
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so unless their amplitude is exponentially suppressed, 
they can significantly shift the energy of the state. The 
filter we have constructed offers a polynomial suppres- 
sion; we need a filter that drops more abruptly outside 
its bandwidth. 

This requires a second modification to the naive algo- 
rithm and is realized by repeating the phase estimation 
r] times, using a total of rik auxiliary qubits. We obtain 
the same state $ as above (c.f. Eq. [2]), except that the 
factor (ifalu) is now raised to the yyth power. For those 
(fa that are within j ^ffi of /i, this factor is at least 
1/2. Thus, the overlap of this state with the projector 
g = /„®|0fc)(0fc|®'' win typically be \\Q\<^)f > ^ where 
m is the number of eigenstates of H in the bandwidth of 
the filter. 

Thus, Grover's algorithm can be used to amplify this 
overlap to nearly 1 in a time at most When the 

overlap of the state with the filter is too small, i.e. if 
< say, this step will fail and the algorithm 

will abort. Choosing k ^ \og2{-) and -q ^ n yields, 
after a successful application of Grover's amplification, a 
state of energy ± e as desired (see Appendix [C| . To 
summarize, this algorithm acts as a filter on the energy. 
The position /i and width e ^ l/poly(n) of the filter are 
specified by the user. When no eigenstates of H lie within 
the filter's bandwidth, the algorithm aborts as desired. 

Note that the method can be adapted in a straightfor- 
ward way to produce thermal distributions of the system 
at any temperature T > l/poly(n). We could in a first 
step combine our method with quantum counting 
to estimate the density of states ^{E) = S{(fa — E) 
with a l/poly(n) resolution. We could then choose an 
energy scale E at random according to the distribution 
P{E) - e^/*'«^I?(£:) and use our algorithm to prepare 
a state of energy close to E. 

Analogously to the classical case, determining the 
ground state energy of a local quantum many-body sys- 
tem within accuracy l/poly(n) is a complete problem 
for the complexity class known as Quantum Merlin and 
Artur (QMA) Whether the problem remains com- 

plete when an extensive error is tolerated is unknown, 
but would be a natural quantum extension of the PGP 
theorem. Indeed, QMA is a natural generalization of NP: 
it is defined similarly except that both the witness and 
the verification circuit Vx are quantum mechanical. Be- 
side the n witness qubits on which it operates, Vx can 
also make use oi h poly(n) auxiliary qubits initialized 
in the state that serve as a scratchpad during the com- 
putation. The output of the verification procedure is ob- 
tained by measuring the first output qubit of the circuit. 
Because of the intrinsic randomness of quantum mechan- 
ics, this procedure is probabilistic: 1) when a; € £, there 
exists a witness w that will cause Vx to output 1 with 
probability greater than m, and 2) when cc ^ £, all wit- 
nesses cause Vx to output 1 with probability less than v 
where u — v > l/poly(ri). 

The completeness of the local Hamiltonian problem 
for the class QMA suggests that our algorithm can be 
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FIG. 1: The circuit consists of a sequence of measurements of 
R and Q. The results are coherently imprinted on k auxiliary 
qubits. 



used to solve all these problems and prepare the relevant 
witness in a time \/2". This is not quite right because 
the mapping to the local Hamiltonian problem does not 
preserve the size of the witness. Nevertheless, a small 
modification almost does the trick. 

A good witness is an+h qubit state V' with 1) all /i an- 
cillary qubits in the state — summarized hy Q\ip) = {ip) 
where Q is the projector onto the all-zero state of the 
auxiliary qubits — and 2) a probability at least v of out- 
putting 1 at the verification procedure — summarized 
by > V where R is the projector associated with 

the verification procedure. Thus, the tasks of preparing a 
good witness boils down to producing a state that max- 
imizes the overlap with two projectors Q and R. When 
[Q,R] = 0, this task can be accomplished straightfor- 
wardly with Grover's algorithm, but additional efforts 
are required in the general case. Indeed, if we start say 
with a random state in the image of Q and amplify the 
projector R, we will typically obtain a state that is mostly 
supported outside the image of Q, unless [Q, R] = 0. 

The method we propose to solve this problem is a mod- 
ification of our algorithm that builds on the work of Mari- 
ott and Watrous [191 . The main modification is to replace 
the phase estimation algorithm by the circuit of Figure 
[T] It consists of a sequence of k (odd) alternating mea- 
surements of R and Q whose outcomes are coherently 
recorded on k auxiliary qubits initially in the state 0. 
The behavior of this circuit on an eigenstate \a) of the 
operator QRQ with eigenvalue pa can be analyzed using a 
result of Jordan [24| (see Appendix [X)) . The state of the k 
auxiliary qubits becomes a superposition of all sequences 
of and 1, and the amplitude of consecutive distinct out- 
comes, i.e. the amplitude associated to each "switches" 
from to 1 or vice versa, is ^/l — Pa- Thus, counting the 
number of switches in the measurement outcomes allows 
us to estimate the eigenvalue pa of the state. 

The situation is therefore analogous to phase estima- 
tion, except that the eigenvalue Pa is not encoded in a 
momentum state but in a state with a certain number 
of switches between the outcomes and 1. Accordingly, 
we must replace the momentum state used in our algo- 
rithm by a state with the right distribution of switches 
E,e{o,i}'^ iVJ^)'-''^'^ iVT^y^'^ (-1)'^^'^ |j) where 
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s denotes the number of switches and £ the number of 
pairs of consecutive O's. The bandwidth e is adjusted by 
setting k = H£i2^ii£)_ Que important advantage of this 
type of filter state is that it drops very abruptly out- 
side its bandwidth, is essentially proportional to 
a normal distribution centered ai p — ii and of variance 
2^(1 - Thus, there is no need for multiple copies 
of the filter state and the rest of the algorithm proceeds 
as before. 

This more general algorithm does not perform as well 
as the algorithm used for local Hamiltonians because it 
searches over a larger Hilbert space: the space of the wit- 
ness and the scratchpad. This is to be expected since it 
makes no assumption about the structure of the verifica- 
tion procedure Vx- Note however that all known "natu- 
ral" problems in QMA — e.g. non- identity check [20| . 
consistency of quantum states [2l|, A^-representability 
[2^ . and zero-error capacity of quantum channels [23] 
— use a scratchpad of only logarithmic size, so in those 
cases the running time is the same as for local Hamilto- 
nians. It is tempting to conjecture that the scratchpad 
of all problems in QMA can be reduced to this size. 

To summarize, we have presented a method to prepare 
ground and thermal states of quantum many-body sys- 
tems on a quantum computer. The time required by our 
algorithm is equal to the square-root of the Hilbert space 
dimension of the system — the same time required to pre- 
pare the ground state of a classical many-body system. 



This represents a speed up by a power of 6 compared to 
exact diagonalization, which in general is the only avail- 
able technique to accomplish this task on a classical com- 
puter. It is perhaps surprising that this task cannot be 
accomplished by a straightforward combination of phase 
estimation and Grover's algorithm, but our analysis of 
this strategy reveals an important failure and more elab- 
orate methods were required. A quantum computer, if 
it could be built, could serve as an efficient simulator 
of quantum many-body systems. The method we have 
presented would complement this simulation by initializ- 
ing the computer in a low-energy state of the simulated 
system. 

With some modifications, our algorithm can be used 
to solve and prepare relevant witnesses of all problems 
in the complexity class QMA, the quantum generaliza- 
tion of NP. In that case, the physical task consists of 
preparing a state that has a large overlap with two pro- 
jectors. Problems in NP form a special case where those 
projectors commute and can be solved straightforwardly 
using Grover's algorithm. However, in the general case 
the projectors do not commute and more sophisticated 
techniques were required. 

We acknowledge Andrew Childs, Peter H0yer, Dominik 
Janzing, John Preskill, and John Watrous for stimulating 
discussions. This work began while P.W. was visiting 
D.P. who was a postdoctoral scholar at Caltech. 
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APPENDIX A: JORDAN'S RESULT 

Ourjnain tool of analysis is a result attributed to Jor- 
dan [24| , a more modern version of which can be found in 
[l^ . The result states that any two projectors Q and R 
on an iV-dimensional Hilbert space can be put in a simul- 
taneous block-diagonal form, with blocks of size at most 
2. Clearly, the operators QRQ and RQR share the same 
spectrum {pa}, bounded between and 1 (this can be 
seen by left and right polar decomposition of the opera- 
tor QR). Their respective eigenvectors {qa} and {ra} are 
in general different however. Since Q and R are purely 
contractive, it follows that if = 1 for some a, then the 
basis can be chosen such that \qa) = \ra)- When pa = 0, 
then either Q\qa) = or R\ra) = 0. For the intermediate 
values < Pa < 1, Jordan found that we can group the 
remaining eigenvectors in pairs that we denote {qa,qa) 
and (r^jT^) such that 



(Al) 
(A2) 

(A3) 
(A4) 



with the property that Q\q^J = b\ql) and i?|r^) = &|r^). 
By enlarging the dimension of the Hilbert space (at most 
doubling its dimension) and allowing pi to take the values 
and 1, we can assume that all eigenstates of QRQ and 
RQR are paired up in this fashion, so that both sets {q^} 
and {r^} are complete orthonormal bases. 



APPENDIX B: FAILURE OF THE NAIVE 
ALGORITHM 

The naive algorithm to approximate the ground state 
of a local Hamiltonian consists of using phase estimation 
to mark the low-energy eigenstates of H, and then inte- 
grating this marking procedure in Grover's algorithm to 
produce a state of low energy. This strategy can easily be 
analyzed with the help of Jordan's result. Indeed, let Q 
be the projector onto the all-zero state of the k auxiliary 
qubits used by phase estimation and R be the projec- 
tor on the output of the phase estimation indicating an 
energy less than E. 

As mentioned in the main text, the unitary evolution 
U — e^'^ cannot be realized perfectly in general, but 
this is a source of error that can be ignored because it 
doesn't build up during Grover's algorithm. Thus, we 
will assume here that the phase estimation algorithm im- 
plements U exactly. 

In this language, the state ql corresponds to a state 
of the form \a) |Ofe) where \a) is an eigenstate of H 
with energy (pa- The eigenvalue Pa of QRQ associated 
to that state is equal to the probability that the phase 
estimation algorithm diagnoses \a) as having an energy 
less than E. This is where the finite success probability 



of the phase estimation algorithm comes into play. The 
important point is that even if the energy ipa is well be- 
low or well above E, there is a small probability that 
the algorithm will give the wrong answer. The effect is 
more pronounced when the actual energy of ipa is close 
to the acceptance threshold E, but it is the small error 
probabilities that will really cause a problem. The error 
is zero only when ipa can be expressed exactly in binary 
form with k bits. Thus, unless very detailed knowledge 
of the spectrum of H is available, these small errors are 
unavoidable. 

Continuing with the naive algorithm, we prepare a ran- 
dom superposition \ip) = X^a'^al'^a)' ^-^^ ^ random state 
of the n system qubits with the k auxiliary qubits in state 
0, and use Grover's algorithm to amplify the image of R. 
This results in the state 
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We see that, as a consequence of the amplification of R, 
the state ip' is no longer supported only on the image of 
Q as indicated by the presence of the (7° in the state. The 
overlap with Q is easily computed 
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and this can be arbitrarily small. For instance, if the 
vast majority of states have pa ~ I/VN and a negligible 
fraction of them have p^s of order unity, this overlap is 
of order 1/y/N. 

This example summarizes the main problem of the 
naive approach that is overcomed by our method. We 
want to create a state that has a large overlap with two 
projectors Q and R. When [Q, R] = 0, we can simply pre- 
pare a random state in the image of Q and use Grover's 
algorithm to amplify R. But when the two projectors 
do not commute, the amplification of R can move the 
state almost completely outside the image of Q, so the 
technique fails. 



APPENDIX C: DETAILED ANALYSIS FOR THE 
GROUND STATE PROBLEM 

We make use of an upper and a lower bound on the 
inner-product of two different momentum states (c.f. 
Eq. [J) used by our algorithm. 1) \{lp\h)\ < 2''+^v-f,\ 
and 2) when \ip~n\< 2~'=/(27r^), then \{ip\fi)\''^ > 1/2. 

To prove the first bound, we use the inequality |1 — 
e"| > 2|a;|/7r for — tt < x < tt and elementary algebra to 
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obtain 
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as claimed. 

For the second bound, assume that \ip — fj,] < 
2~''/{2tt^). Wc can use the fact that |(<^|/u)| > 
Re(((p|/i)) to obtain 



> 



1 

2k 

1 

2k 



2'=-l 



i2Trj{ip-n) 



^ cos(27rj(^-/x)) 



j=0 

2''-l 



> 4 E cos(V0?) 

= cos(l/^) 

> l-l/(2r?). 



(C6) 
(C7) 

(C8) 

(C9) 
(CIO) 



Raising to the 77th power and using the inequaHty (1 — 
a;)" > 1 — nx for n < 1 and x > gives the desired result. 

We will now demonstrate that our algorithm will work 
as advertised, i.e. produce a state of energy /i ± e, with 
high probability. We break this proof into two parts. 
First, we show that the algorithm does not systematically 
abort and second that when it does not abort it produces 
the right state. 

Remember that the algorithm aborts when the over- 
lap WQmf = EalaaPK-^alM)!' is less than 0{1/N). 
Using the lower bound derived above, we know that if 
there is at least one eigenvalue, say ipo, that lies in the 
interval fi ± 2^'^ / {2Try/rj), this overlap will be at least 
|aoP/2. Since the state is chosen at random, the ampli- 
tude |qoI has an exponentially high probability of being 
greater than l/{2y/N) which is sufficient for the success 
of the amplification procedure. Note that the interval 
H ± 2^'^/(27rY^) has a polynomial width, i.e. k scales 
only logarithmically with n and r] polynomially. Thus, 
we can sweep all values of /i to this accuracy in polyno- 
mial time. 

We must now demonstrate that when the amplifica- 
tion procedure succeeds, then with very high probability 

it generates a state with the desired energy. We can as- 
sume in this case that > 1/N since otherwise the 



amplification procedure would have had an exponentially 
small chance of succeeding. Let us first upper bound the 
average energy: 



Eal«an(^a|M)l>a 



< M+2 + 



(Cll) 
(C12) 
(C13) 



where Yl'^ is the sum restricted to values of a such that 
<fa > M + <^/2- Using the lower bound on ||(3|$)|| and the 
fact that < < 1 we obtain 

{H) < (;.+ |)+7V2|(;, + e/2|M)r (C14) 

Consequently, the desired bound is obtained when 
N'^lin + e/2\ii)\'^^ < e/2. Using our upper bound on 
the inner product + e/2|/x)| yields 



(2fee)2»7 



< e/2 



(C15) 



which is satisfied with k > 21og2(i) and r] > 1 + {n + 

l)/l0g2(i). 

Similar arguments produce an upper bound on the av- 
erage energy 



Eal"al'l(^alM)l>a 



> 



(CI6) 



where is now the sum restricted to values of a such 

that <fa<fJ-~ e/2. Using the lower bound on 

and the upper bound on the inner product |((/?a|M)l gives 



(C17) 



which is greater than — e provided that rj > 1 -t- (n -I- 
log2 M)/log2(i). 

Note that with a k growing polynomially with log(n) 
and 77 growing polynomially with n, the error on the en- 
ergy decreases as l/poly(n) and the total running time 
is ■\/2"poly(n) as desired. 



APPENDIX D: DETAILED ANALYSIS FOR 
PROBLEMS IN QMA 

The analysis of the general algorithm for problems in 
QMA follows similar lines, but the derivation of the filter 

function is slightly more involved. The verification cir- 
cuit Vx acts on m = n + h qubits: the n qubits containing 
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the witness and a /i-qubit scratchpad. We make use of 
Jordan's result with Q being the projector onto the all- 
zero state of the scratchpad and R = Vx{\l){l\® Im-i)V^ 
is the projector onto the accepting subspace of the verifi- 
cation procedure. Remember that the verification proce- 
dure takes inputs of the form = \w) ® \0h) and accepts 
with probability ||(|1)(1| ® = ||gi?Q|^)||2. 
Thus, the eigenstates \q]^ of QRQ correspond to wit- 
nesses with all-zero scratchpads with an accepting prob- 
ability Pa- 

Our algorithm makes use of k additional auxiliary 
qubits, for a total oi n + h + k. Armed Eqs (|AmA4|) . 
we see that the circuit of Figure [1] applied to the state 
\qa) ® |Ofc) produces the outcome 

jefo,!}'' 

Indeed, we get factor of ^Jl — Pa each time the outcome 
switches from to 1 or vice versa, and a factor of ^Jp2 
otherwise. There is an additional factor of —1 for every 
pair of consecutive O's. 

Let us now analyse our algorithm. We initialize the 
first m qubits in a random state in the support of 
R. This is done by setting the first qubit in the state 
|1) and the remaining m — 1 qubits in a random sta- 
bilizer state, and applying the unitary transformation 



V^. Then, we prepare the k auxiliary qubits in the state 

Im> = E,e{o,i}'=(%/M)'-^^^;HVW)^(^n-i)'^^'^|j>- This 

can be achieved by a circuit composed of k 2-qubit gates. 

We now apply the inverse of the circuit shown on Fig- 
ure [TJ producing the state 

Y,(^a9{Pa.P^)\ql)®\%) + ■■■ (Dl) 
a 

where the ellipsis represents terms outside the image of 
Q ® |0fc)(0fc|. The filter function is defined by 

gij), p)= E \J /i'^-^o) (1 - fiyu)ph-Hf) (1 - pyu) 

(fe-l)/2/,x 

"r^n — 2^]- 

In the last step, we have approximated the binomial 
distributions by normal distributions. At this point, 
we can use Grover's algorithm to amplify the image of 
Q ® |0fc)(0fe|, and the rest of the analysis proceeds as 
above. 



